Re: KASAN: use-after-free Read in cipso_v4_genopt

On Tue, Mar 2, 2021 at 2:15 PM Dmitry Vyukov wrote: ... > Not sure if it's the root cause or not, but I am looking at this > reference drop in cipso_v4_doi_remove: > https://elixir.bootlin.com/linux/v5.12-rc1/source/net/ipv4/cipso_ipv4.c#L522 > The thing is that it does not remove from the list

Re: KASAN: use-after-free Read in cipso_v4_genopt

syzbot has found a reproducer for the following issue on: HEAD commit:7a7fd0de Merge branch 'kmap-conversion-for-5.12' of git://.. git tree: upstream console output: https://syzkaller.appspot.com/x/log.txt?x=13693866d0 kernel config: https://syzkaller.appspot.com/x/.config?x=779a256

Re: KASAN: use-after-free Read in cipso_v4_genopt

On Tue, Mar 2, 2021 at 6:03 AM Dmitry Vyukov wrote: > ... > Besides these 2 crashes, we've also seen one on a 4.19 based kernel, see > below. > Based on the reports with mismatching stacks, it looks like > cipso_v4_genopt is doing some kind of wild pointer access (uninit > pointer?). Hmm, inte

KASAN: use-after-free Read in cipso_v4_genopt

Hello, syzbot found the following issue on: HEAD commit:5695e516 Merge tag 'io_uring-worker.v3-2021-02-25' of git:.. git tree: upstream console output: https://syzkaller.appspot.com/x/log.txt?x=168c27f2d0 kernel config: https://syzkaller.appspot.com/x/.config?x=e33ab2de74f48295 das